Paths

Ethical Hacking

Please Note: The courses in this series are aligned to CEHv9. For the courses aligned to the current CEH, CEH v10, please see the "Ethical Hacking (CEH Prep 2018)" path. In this series, you'll gain an understanding of the core concepts, techniques, tools and "lingo" used in the security field. Also of note, the cryptography coverage for this path is provided through two courses, one of which is shared with our SSCP path.
Welcome to the world of ethical hacking. This series will teach you the basic concepts, techniques, concerns, tools and technologies involved in ethical hacking. The courses in this path are aligned to v9.... Read moreRead less

Related topics

CEH 312-50

In this series, you'll gain an understanding of the core concepts, techniques, tools and "lingo" used in the security field. NOTE: Crypto information for this Path is provided through two courses, one of which is shared with our SSCP path.

Ethical Hacking: Understanding Ethical Hacking

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. This course will start you down the path of becoming an Ethical Hacker, or in other words; become a "Security Profiler." You will learn to start thinking and looking at your network through the eyes of malicious attackers. You will learn to understand the motivation of an attacker. It is the duty of all System Admins and Security Professionals to protect their infrastructure from not only outside attackers but also attackers within your company. We will cover the terminology used by attackers, the difference between "hacking" and "ethical hacking", the phases of hacking, the types of attacks on a system, what skills an Ethical Hacker needs to obtain, types of security policies, why Ethical Hacking is essential, how to be in the "know" of what's happening in the hacking world, who a "hacker" is, what are the biggest security attack vectors, and more. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

The Truth About Living in a Technology Based World7m

Overview of the CEH Certification Program21m

How to Build a Lab to Hack Safely53m

Installing and Configuring Your Windows Server VMs45m

Installing and Configuring Your Desktop VMs58m

Information Security Overview23m

Security Threats and Attack Vectors47m

Hacking Concepts46m

Hacking Phases28m

Attack Types32m

Information Security Controls1h 5m

How to Prepare for the Certified Ethical Hacker Exam27m

Ethical Hacking: Reconnaissance/Footprinting

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. As an Ethical Hacker, you've been asked to do a "Blackbox" attack on a customer's infrastructure. Your first step is finding out as much as you can about the "target." You accomplish this via reconnaissance/footprinting. This is the initial stage in gaining a blueprint of the security profile of a target, and it is accomplished in an organized manner. Reconnaissance is one of the three "pre-attack phases," and results in a unique profile of an organization's networks and systems. "Reconning" an organization is necessary in order to systematically gather all the related data in regards to the technologies deployed within the network. Reconnaissance can take up to 90% of the time during penetration testing or an actual attack. We'll show you how attackers are currently reconning your company, as well as discuss in detail the steps of reconnaissance. Finally we'll look at some possible countermeasures to help discourage attackers. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

What Do You Mean by Reconnaissance/Footprinting?27m

Initially What Do You Look For?46m

The More You Look, the More You Find31m

Other Reconnaissance Techniques50m

Reconnaissance via Google Hacking40m

Reconnaissance Countermeasures & Pen Testing26m

Ethical Hacking: Scanning Networks

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. So, after reconnaissance, we need to scan for basics, kind of like knocking on all the doors to see who is home and what they look like. Then, when you find a machine that's "live", we need to get to know it really well, asking some rather personal questions like, "what OS are you running?" or "what applications are you running?" and "which ports are listening on the network?". We'll go over all you'll need to know for the exam regarding scanning, and play with some pretty fun tools along the way. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Overview of Scanning22m

Understanding the 3-way Handshake21m

Checking for "Live" Systems and Their Open Ports34m

Types of Scanning46m

Banner Grabbing and OS Fingerprinting30m

Vulnerability Scanning and Drawing Out the Network55m

Preparing Proxies and Other Anonymizing Techniques19m

Ethical Hacking: Enumeration

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Enumeration is the first official attack at your target. Enumeration is the process of gathering information that might include user names, computer names, network shares, services running, and other possible points of entry. This course we'll show different techniques that can be used against your network. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Enumeration Explained & the Techniques Used17m

Enumerating via Defaults & NetBIOS52m

Enumerating via SNMP15m

Enumerating via LDAP16m

Enumerating via NTP10m

Enumerating via SMTP18m

Enumerating via DNS20m

Oh, There's More26m

Countermeasures for Enumeration13m

Ethical Hacking: System Hacking

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. This is what it all comes down to. After we've done our research, we've found our target, and identified its services, shares, users and resources, it’s time to take total and complete control of this box. In turn, we then use this box to repeat our efforts to pwn more boxes within the network as well as grab any intellectual property that could be of great worth. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Understanding This Stage10m

Phase 1: Gaining Access – Cracking Passwords50m

More Cracking42m

Phase 2: Gaining Access – Escalating Privileges38m

Phase 3: Maintaining Access – Executing Applications37m

Phase 4: Maintaining Access – Hiding Your Tools31m

Phase 5: Covering Your Tracks - Clearing Logs and Evidence24m

Ethical Hacking: Malware Threats

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. The easiest way to get into a system or network is to get someone to let us in. Do you pirate software, movies, music, or heaven forbid - an operating system? I'm about 99.999% sure you've already been pwned. Malware is specifically designed to gain access or damage systems without the knowledge of the victim. Malware is on the rise due to the sheer volume of new types that are easily created daily, and the money that can be made through organized Internet crime. We'll talk about the various malware types, including viruses, Trojans, and worms. Now, we won't leave you in despair, we'll also talk about countermeasures and ways to detect these bad boys. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

The Hard Truth Behind Malware30m

What's a Trojan?25m

Trojan Infections29m

Types of Trojans32m

Virus and Worms44m

Detecting Malware38m

Countermeasures25m

Ethical Hacking: Sniffing

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. There's so much an attacker can learn from simply "listening" or sniffing your network. Passwords? Check. Emails? check, and the list goes on and on. This course, Ethical Hacking: Sniffing (part of the Ethical Hacking series) will clarify the central ideas of sniffing and their utilization in hacking exercises. You'll also learn how imperative it is for security professionals to be "up" on sniffers and their methods. Furthermore, you'll be shown a plethora of instruments and procedures utilized as part of securing your network from these types of attacks. By the end of this course, you'll understand much more about sniffing and how to keep your data protected.

Table of contents

Sniffing – It's Not the Cold Season34m

DHCP Assaults21m

Big-MAC Attacks15m

ARP Poisoning30m

DNS Poisoning21m

Countermeasures17m

Ethical Hacking: Buffer Overflow

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Buffer overflow is a topic that only software developers using low-level programming languages really get an opportunity to fully understand. However, IT security professionals are increasingly called upon to better understand how vulnerabilities created by poor software design and implementation practices can be exploited to create security issues in systems and networks. The problem is that most IT professionals do not have the extensive software development background needed to tackle the subject of buffer overflow. This course breaks down the technical subjects of computer memory management, controlling code, and data inside of a running program, and exploiting poor quality software into terms that IT people with no software development experience can understand. Also examined are ways to prevent buffer overflow conditions and minimize the impact of buffer overflows that do happen. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

What Are Buffer Overflows?35m

Inside Buffer Overflows1h 1m

Finding Buffer Overflows1h 25m

Mitigating Buffer Overflows1h 0m

Ethical Hacking: Social Engineering

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Security defenses within information systems focus primarily on technology controls, that is, security is implemented within physical appliances and software. These controls are frequently bypassed when the humans themselves are compromised by a social engineering attack. Social engineering involves compromising the individuals that use these systems. Attackers look to exploit weaknesses in human nature and coerce people into performing actions which give the attacker an advantage. In this course, we'll look at various different social engineering techniques that can be used to compromise systems. We'll also look at both computer-based and behavior-based tools to help defend against this risk. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Humans: The Soft Center Within the Hard Shell29m

A Walkthrough of a Social Engineering Attack50m

Reconnaissance and OSINT37m

Phishing Attacks58m

Identity Theft and Impersonation45m

Social Engineering Countermeasures54m

Ethical Hacking: Denial of Service

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Denial of service attacks typically seek to render a service unavailable by flooding it with malicious traffic so that it becomes unresponsive to legitimate requests. In this course, Ethical Hacking: Denial of Service (part of the Ethical Hacking series), you'll look at the purposes of these attacks, ranging from disrupting gaming adversaries, to hacktivism, and to law enforcement by government agencies. You'll also explore various ways attacks are constructed and the weaknesses they exploit in order to be successful. Finally, you'll delve into defensive patterns to help protect services from malicious attacks. By the end of this course, you'll have a much better understanding of denial of service attacks and how to protect yourself from them.

Table of contents

Understanding Denial of Service Attacks38m

Attack Techniques52m

Tools and Services31m

Defending Against Attacks45m

Ethical Hacking: Session Hijacking

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Session persistence is a fundamental concept in information systems. On the web, for example, which is dependent on the stateless HTTP protocol, session persistence is a key component of features ranging from shopping carts to the ability to logon. At a lower level on the network tier, the TCP protocol relies on sessions for communication between machines such as a client and a server. The confidentiality and integrity of this communication can be seriously impacted by a session hijacking attack. Learning how to identify these risks is an essential capability for the ethical hacker. Systems are frequently built insecurely and readily expose these flaws. Conversely, the risks are often easy to defend against by implementing simple patterns within the application. This course walks through both the risks and the defenses. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Understanding Session Hijacking18m

Session Persistence in Web Applications31m

Hijacking Sessions in Web Applications47m

Network and Client Level Session Hijacking36m

Mitigating the Risk of Session Hijacking45m

Automating Session Hijack Attacks27m

Ethical Hacking: Hacking Web Servers

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Vulnerabilities in web server implementations are frequently the vector by which online attackers compromise systems. The impact can range from short periods of outage, to the total disclosure of sensitive internal information. There are many different levels an attacker may focus their efforts on, including the application, the host operating system, and of course the web server itself. Each has their own weaknesses and each must have the appropriate defenses in place to ensure resiliency from online attacks. In this course, we'll look at various attack vectors in web servers. These include exploiting misconfigured servers, leveraging weaknesses in unpatched environments, compromising weak SSL implementations and much, much more. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Understanding How Web Servers Are Hacked19m

Discovering Risks in Web Servers31m

Web Server Misconfiguration34m

Managing and Hardening Web Servers29m

Other Attacks Against Web Servers29m

Ethical Hacking: Hacking Web Applications

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. The security profile of web applications is enormously important when it comes to protecting sensitive customer data, financial records, and reputation. Yet, web applications are frequently the target of malicious actors who seek to destroy these things by exploiting vulnerabilities in the software. Most attacks against web applications exploit well known vulnerabilities for which tried and tested defenses are already well-established. Learning these patterns – both those of the attacker and the defender – is essential for building the capabilities required to properly secure applications on the web today. In this course, we'll look a range of different security paradigms within web applications both conceptually and in practice. They'll be broken down into detail, exploited, and then discussed in the context of how the attacks could have been prevented. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Understanding Security in Web Applications39m

Reconnaissance and Footprinting43m

Tampering of Untrusted Data37m

Attacks Involving the Client50m

Attacks Against Identity Management and Access Controls30m

Denial of Service Attacks43m

Other Attacks on the Server45m

Ethical Hacking: SQL Injection

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Ever since we started connecting websites to databases, SQL injection has been a serious security risk with dire ramifications. The ability for attackers to run arbitrary queries against vulnerable systems can result in data exposure, modification, and in some cases, entire system compromise. SQL injection is classified as the number one risk on the web today due to the "perfect storm" of risk factors. It's very easily discoverable, very easily exploited, and the impact of a successful attack is severe. Add to that the fact that injection risks remain rampant, it's clear how it deserves that number one spot. This course takes you through everything from understanding the SQL syntax used by attackers, basic injection attacks, database discovery and data exfiltration, advanced concepts, and even using injection for network reconnaissance and running system commands. It's everything an ethical hacker needs to know to be effective in identifying the SQL injection risk in target systems. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Why SQL Injection Matters20m

Understanding SQL Queries23m

The Mechanics of SQL Injection Attacks45m

Discovering Schema and Extracting Data45m

Blind SQL Injection46m

Advanced SQL Injection Concepts44m

Defending Against Attacks44m

Evasion Techniques20m

Automating Attacks33m

Ethical Hacking: Hacking Wireless Networks

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Great! You have just finished setting up your wireless network. You did everything you were suppose to, like giving your SSID a unique name and securing your network with a strong password, so that someone can't piggyback off your network. Now that you are "safe and secure," you don't have to worry about hackers right? SLOW DOWN there skippy. While you have taken the "basic" steps required, you still need to be aware of some hacking methods that can be used to gain access to your network, despite your precautions. You also need to be very wary whenever you are accessing the network that is not your own, and let's not forget about other wireless technology; Bluetooth. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking.

Table of contents

Insights into Wireless54m

Encryption in Wireless23m

Threats from Wireless30m

The Methodology of Hacking Wireless45m

Hacking Bluetooth22m

Countermeasures18m

Ethical Hacking: Hacking Mobile Platforms

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Okay, who here DOESN'T have a mobile device? Hands anyone? Didn't think so. Mobile devices have, at an alarming rate, become extremely popular with users and businesses. So next question, what are you doing about it's security? Anyone? Most folks have approached mobile devices with the attitude of "if it works, syncs, and plays games, I'm good". Overlooking this side of technology will lead you into one day appearing on an online video with the words "FAIL" plastered across your company's logo (or your face!). This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Mobile Device Attack Vectors1h 0m

Hacking Android1h 19m

Hacking iOS51m

Hacking Other Mobile Platforms18m

MDM: Mobile Device Management, Guidelines, and Tools33m

Mobile Malware37m

Mobile Payments15m

Ethical Hacking: Evading IDS, Firewalls, and Honeypots

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. Most modern networks are protected by a combination of intrusion detection systems and firewalls. Increasingly, they may also include honeypots as a means of early detection of malicious activity. Attackers are constantly looking for ways of evading these defenses in order to render them ineffective. They're seeking to both gain access to resources which are intended to be beyond their reach, and do so in a stealthy manner so as to go undetected. In this course, we'll look at the advantages each of these security defenses provides and the roles they play in securing networks. We'll then look at how attackers seek to undermine their effectiveness by employing a range of techniques that help them evade detection. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking.

Table of contents

Understanding Organizational Defenses25m

Firewalls53m

Intrusion Detection Systems57m

Honeypots44m

Ethical Hacking: Cloud Computing

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. "The Cloud" is revolutionizing how we run software and services by providing low cost, flexible, and innovative alternatives to traditional hosting models. However, with the shift to cloud comes new security considerations. The cloud isn't more secure or less secure, rather it's differently secure; it strengthens security profiles in many areas whilst presenting new risks in others. Then again, many of the traditional risks in software don't change at all. In this course, we'll look at the ways the cloud can enable us to build more secure software than ever, whilst also identifying where it can leave us more vulnerable. We'll also look at "hardening" the cloud â€“ how can we take this new computing paradigm and use it to strengthen our security profiles? This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Table of contents

Cloud Computing Concepts39m

Organizational Security Considerations32m

Cloud Computing Risks40m

Cloud Computing Security Strengths34m

Hardening the Cloud31m

Ethical Hacking: Cryptography

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. In this course, you will learn to understand and apply fundamental concepts of cryptography, the learner will understand requirements for cryptography, understand and support secure protocols, and will gain an understanding of how to operate and implement cryptographic systems. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking. Please make sure to watch SSCPÂ®: Cryptography.

Table of contents

Learning Cryptography17m

Additional Cryptography Topics20m

Cryptography Tools for Advanced Study15m

SSCP®: Cryptography

Description

In this course, you will learn to understand and apply fundamental concepts of cryptography, the learner will understand requirements for cryptography, and will understand and support secure protocols, the learner will operate and implement cryptographic systems.

Table of contents

Introduction4m

Understand and Apply Fundamental Concepts of Cryptography1h 3m

Understand Requirements for Cryptography32m

Understand and Support Secured Protocols21m

Operate and Implement Cryptographic Systems45m

Ethical Hacking: Penetration Testing

Description

Pluralsight is not an official partner or accredited training center of
EC-Council. What's penetration testing? Well it's simple, as security professionals our job is to make it extremely difficult to get inside our systems. Remember, you can't stop attackers, your job is to slow them down. How? Let's start by doing exactly what the attacker will do. Penetration testing (pen testing) is the practice of attacking your own network or that of a client's, using the same tools, techniques, and steps that an attacker would. The purpose of pen testing is to expose gaps, weaknesses, and possible entry points without doing any real damage. In this course, you will learn how to prepare, execute a pen test, and how you should report your results in a way that will add value to your time and efforts.

Table of contents

Understanding Penetration Testing1h 0m

Pen Testing: Reconning and/or Footprinting the Target8m

Pen Testing: Scanning the Target8m

Pen Testing: Enumerating the Target14m

Pen Testing: Hacking the Target25m

Pen Testing: Sniffing the Target9m

Pen Testing: Social Engineering the Target16m

Pen Testing: DoS/DDoS the Target12m

Pen Testing: Session Hijacking the Target10m

Pen Testing: Targeting Web Servers13m

Pen Testing: Hitting Web Apps29m

Pen Testing: Looking at the Wi-Fi11m

Pen Testing: Focusing on the Mobile Devices19m

Pen Testing: Target the Firewall and/or IDS16m

Pen Testing: Going After the Cloud13m

How to Bring It All Together11m

What you will learn

Five phases of hacking

How to identify and understand risks

How to defend against risks or attacks

How to extrapolate data

The difference between "hacking" and "ethical hacking"

Pre-requisites

This material is meant to be entry-level, but you should have a strong understanding in TCP/IP and operating systems, with at least one year of experience with networking technologies.